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ABSTRACT : 



A method and device are provided for controlling access to data. Portions of the 
data are protected and rules concerning access rights to the data are determined 
Access to the protected portions of the data is prevented, other than in a 
non-useable form; and users are provided access to the data only in accordance with 
the rules as enforced by a mechanism protected by tamper detection. A method is also 
provided for distributing data for subsequent controlled use of those data. The 
method includes protecting portions of the data; preventing access to the protected 
portions of the data other than in a non-useable form; determining rules concerning 
access rights to the data; protecting the rules; and providing a package including- 
the protected portions of the data and the protected rules. A user is provided 
controlled access to the distributed data only in accordance with the rules as 
enforced by a mechanism protected by tamper protection. A device is provided for 
controlling access to data having protected data portions and rules concerning 
access rights to the data. The device includes means for storing the rules; and 
means for accessing the protected data portions only in accordance with the rules, 
whereby user access to the protected data portions is permitted only if the rules' 
indicate that the user is allowed to access the portions of the data. 

88 Claims, 35 Drawing figures 
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